VERY IMPORTANT

A novel Rust-based malware called ChaosBot has been discovered targeting primarily Vietnamese speakers. It uses Discord for command and control, blending in with normal network traffic. The malware leverages compromised VPN credentials and phishing lures for initial access. Once installed, ChaosBot creates Discord channels for each infected device, executes commands, and exfiltrates data. It has capabilities for system reconnaissance, file manipulation, and screenshot capture. The malware also employs evasion techniques to bypass security controls. Operators attempted to use Visual Studio Code tunnels as an additional backdoor. Two Discord accounts were identified as associated with ChaosBot operations.